Kismet Wireless

Kismet Forums


Posted by:dragorn
Subject:Looking for a client
Date:16:12:11 22/01/2007

> Hello,
> I'd like to be able to look for a client (knowing its MAC address), to see if this client is associated with an AP or is sending probe requests...
> I haven't seen anything concerning client information in the logs, so is there a (simple) way to do that?

At the moment, no, it's not logged well. In newcore it has a separate xml tree inside the network, and is logged inside the network block in text logging mode as well.

You've got a few options:

compile newcore, run the pcap file through, and look at the logs. Theres no client, yet, so it'll be just cranking your file and dumping out the logs.

filter in tcpdump or wireshark and look at what it's doing. you can see the bssid for the client easily there, as well as probe reqs.


Reply to this message